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Amendments to the Claims : 

The following listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1. (Currently Amended) A network connection system comprising: 
a client apparatus: machine: 
an authentication serv e r: server machine: and 
a connection s e rv e r, server machine: w herein: 
the authentication server machine includes: 

a retention uni t for storin g configured to store second cormection 
authentication information generated by the cormection server machine based on user 
identification information and storin g to store an association between the second connection 
authentication information and a cormection seiwer address of the cormection s e rv e r: server 
machine: 

a first unit for acquiring, configured to acquire, from the client 
apparatus. machine. second cormection authentication information that is generated by the 
client apparatus machine based on user identification information input into the client 
apparatus - machine and- acquirin e to acquire a client address of the client apparatus wh e n 
machine once the first unit receives a cormection request from the client apparatus: machine: 
and 

a second unit for tran s mittin g configured to transmit the client address 
to the connection server address associated with the second cormection authentication 
information acquired by the first unit and transmittin g and to transmit the cormection server 
address to the client apparatus: machine. the authentication server machine transmitting the 
cormection server address to the client machine in an authentication process before having 
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ever received the connection server address from the client machine in the same 
authentication process: 

the client apparatus - machine includes: 

a third unit for transmittin g configured to transmit in a message the 
second connection authentication information generated by the client apparatus - machine to 
the authentication server machine together with the cormection r e qu e s t request, the message 
not containing the address of the cormection server machine: 

a fourth unit for rec e ivin g configured to receive the connection server 
address from the authentication serv e r: server machine: and 

a fifth unit for pr e parin g configured to prepare first connection 
authentication information based on the user identification information input into the client 
apparatus machine and transmitting, to transmit ^nd e n e nd e nt of th e auth e ntication s e rv e r ^ the 
first connection authentication information to the connection server address of the connection 
s e rv e K server machine: 

the connection server machine i ncludes: 

a sixth unit for allowin g configured to allow the first connection 
authentication information to be received from the client apparatus - machine, the client 
address being received from the authentication se rv e K - server machine: and 

a seventh unit for p e rformin g configured to perform itself an 
authentication process by using the first connection authentication information transmitted 
from the client address, and 

the authentication s e rv e r, server machine, in response to receiving the second 
connection authentication information from the client apparatu s , machine, searches the 
retention unit for the second cormection authentication information to determine the 
cormection server address associated with the second cormection authentication information. 
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2. (Original) The network connection system according to claim 1 , wherein the 
second connection authentication information is a message digest of the first connection 
authentication information. 

3. (Currently Amended) An authentication serve r machine for b e ing connected 
to a plurality of client apparatus e s machines and a plurality of connection s e rvers, server 
machines, the authentication server machine comprising: 

a retention unit for storin g configured to store second connection 
authentication information generated based on user identification information and storin g to 
store an association between each second connection authentication information and a 
connection server address of a corresponding connection s e rv e r: server machine: 

a first unit - for - acQuirin e configured to acquire the second connection 
authentication information from a client apparatus machine and a client address-whe n once 
the first unit receives a connection request from the client apparatus: machine: and 

a second unit- fer - transmittin g configured to transmit the acquired client 
address to the connection server address of the connection server machine associated with the 
acquired second connection authentication information, and transmitting, to transmit. 
independent of the connection s e rv e r, server machine, the connection server address to the 
client apparatus machine which has transmitted the connection request, wherein 

the authentication se rv aFr- server machine, in response to receiving the second 
connection authentication information from the client apparatus, machine, searches the 
retention unit for the second connection authentication information to determine the 
connection server address associated with the second connection authentication information. 
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the authentication server machine transmits the connection server address to 
the client machine in an authentication process before having ever received the connection 
server address from the client machine in the same authentication process. 

4. (Canceled) 

5 . (Currently Amended) A connection server machine operating with an 
authentication server machine and a client appa F atus r- machine. the connection server machine 
comprising: 

a control unit for r e c e ivin g configured to receive a client address of the client 
apparatu s machine from the authentication server machine after the authentication server 
machine authenticates information received from the client address and switchin g to switch 
from a state in which authentication information is not allowed to be received from the client 
address, ind e p e ndent of th e auth e ntication s e rv e r, address to a state in which authentication 
information is allowed to be received from the client addr e ss, indep e nd e nt of th e 
auth e ntication se rv e r - ; address, the switching occurring in response to the receiving of the 
client address; and 

an authentication unit for r e c e ivin g configured to receive the authentication 
information from the client apparatus machine having the client address to perform itself an 
authentication process by using the authentication information. 

6. (Currently Amended) A network connection system comprising: 
a client apparatus: machine: 
an authentication s e rv e r : - server machine: and 
a connection serv e r, server machine, w herein: 
the authentication server machine includes: 

a retention unit for storin g configured to store a first encrypted user 
name and a first encrypted password, which are encrypted by a first encryption method, and 
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storin g to store an association between a connection server address of the connection server 
machine and the first encrypted user name and the first encrypted password; 

a first unit- f e r - acquirin g configured to acquire the first encrypted user 
name and the first encrypted password and a client address-whe n once the first unit receives a 
connection request from the client apparatus, machine, t he first encrypted user name and the 
first encrypted password being an identification information for identifying a user of the client 
apparatus: machine and 

a second unit for transmittin g configured to transmit the acquired client 
address to the connection server address associated with the user identification information, 
r e c e ivin g to receive from the connection server machine information indicating that the 
connection server machine has shifted to a connection wait state, and transmitting, to 
transmit, independent of the connection s e rv e r, server machine, the connection server address 
to the client apparatus, machine, the authentication server machine transmitting the 
connection server address to the client machine in an authentication process before having 
ever received the connection server address from the client machine in the same 
authentication process: 

the client apparatus machine includes: 

a third unit for transmittin g configured to transmit to the authentication 
server machine in a message the first encrypted user name and the first encrypted password, 
which are encrypted by the first encryption method, together with the connection r e qu e st; and 
request, the message not containing the address of the connection server machine: 

a fourth uni t - for - r e c e ivin g configured to receive the connection server 
address from the authentication serv e r, server machine, and- transmitting. ind e p e nd e nt of the 
auth e ntication -se rv e F ; to transmit to the connection server address a second encrypted user 
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name and a second encrypted password, which are generated by encrypting using a second 
encryption method a user name and a password input by the user, and 

the authentication s e rv e r, server machine, in response to receiving the first 
encrypted user name and the first encrypted password from the client apparatus, machine. 
searches the retention unit for the first encrypted user name and the first encrypted password 
to determine the connection server address associated with the first encrypted user name and 
the first encrypted password. 

7. (Currently Amended) An authentication server machine operating with a 
plurality of client apparatus e s machines and a plurality of connection s e rv e rs, server 
machines, the authentication server machine comprising: 

a retention uni t -f br - sto f in g configured to store user names and passwords, 
which are encrypted by a predetermined method, an d for storin g to store associations between 
both of each user name and each password and a connection server address of a 
corresponding connection s e rv e r: server machine: 

a first uni t for acquirin g configured to acquire an acquired encrypted user 
name, an acquired encrypted password, and an acquired client address-wbe n once the first 
unit receives a coimection request from the client apparatus, machine, the encrypted user 
name and password being an identification information of a user of the client apparatus ^ 
machine: and 

a second unit for tran s mittin g configured to transmit the acquired client 
address to the connection server address associated with the acquired encrypted user name 
and password.- r e ceivin g to receive from the connection serve r machine information indicating 
that the connection server machine has shifted from a state in which authentication 
information is not allowed to be received from the clien t addr e ss, ind e p e nd e nt of the 
auth e ntication s e rv e r, address to a state in which authentication information is allowed to be 
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received from the client addr e ss, indep e ndent of th e auth e ntieation s e rv e r, address, and 
transmitting. - to transmit, independent of the connection s e rver. - server machine, the 
connection server address to the client apparattt &r machine. which has issued the connection 
request, wherein 

the authentication s e rv e r, server machine, in response to receiving the 
identification information of a user of the client apparatus machine from the client ^ paratus, 
machine, searches the retention unit for the identification information of a user of the client 
apparatus machine to determine the connection server address associated with the 
identification information of a user of the client apparatus, machine, and 

the authentication server machine transmits the connection server address to 
the client machine in an authentication process before having ever received the connection 
server address from the client machine in a same authentication process. 

8. (Canceled) 

9. (Currently Amended) A client apparatus - machine operating with an 
authentication server machine and a connection s e rv e r- server machine, the client apparatus 
machine comprising: 

a connection request unit for transmittin g configured to transmit to the 
authentication serve r machine in a message a connection request and a user name and a 
password which are encrypted by a first encryption method ; method, the message not 
containing an address of the connection server machine: 

a receiving and transmitting uni t for r e c e iving. - configured to receive. 
independent of the connection serv e r, server machine, a connection the connection server 
address from the authentication s e rv e r, server machine, e ncryptin g to encrypt by a second 
encryption method the user name and the password input by a user, and tran s mittin g to 
transmit the encrypted user name and password to the connection serve r machine address; 
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a retention uni t for - steri ng configured to store local authentication information, 
which is previously supplied from the connection s e rv e r, server machine, the local 
authentication information associating unique information of the client apparatus m achine 
with at least one of a user name and a password previously provided to the connection s e rv e r t 
server machine: and 

a local authentication unit for e e n e Fatin g configured to generate the unique 
information upon receiving a user name and a password input by the user, and auth e nticating 
to authenticate the user name and the password input by the user by judging based on the 
local authentication information whether or not at least one of the user name and the 
password input by the user is associated with the unique information, wherein: 

the connection request unit transmits to the authentication server machine the 
connection request and the user name and the password which are encrypted by the first 
method only-whenjf the user name and the password input by the user are authenticated by 
the local authentication unit. 

1 0. (Currently Amended) A connection server machine operating with a client 
apparatus machine and an authentication s e rv e r, server machine, the connection server 
machine comprising: 

a control unit that r e c e iv e s configured to receive from the authentication server 
machine an address of the client apparatu s- machine and switch e s, to switch, in response to the 
receiving of the address, from a state in which authentication information is not allowed to be 
received from the client addr e ss, ind e p e nd e nt of th e auth e ntication s e rver, address to a state in 
which authentication information is allowed to be received from the client addr e ss, 
ind e p e nd e nt of th e auth e ntication s e rv e r, address, and allow s to allow communication from 
the address of the client apparatus m achine for a predetermined period; and 
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a transmitting uni t that transmits configured to transmit to the authentication 
server machine information indicating that the connection server machine has shifted to a 
connection wait state in which the connection server machine allows communication from the 
address of the client apparatus - machine for the predetermined period. 

1 1 . (Currently Amended) A network connection system comprising: 
a client apparatus: machine: 

an authentication server machine for supplying information guiding a 
connection destination to the client apparatus: machine: and 

a connection s e rv e r, server machine, wherein the client apparatus: machine is 

configured to: 


calculat e s calculate first authentication information unique to the client 
apparatus machine to register the first authentication information in the cormection s e rv e r ; 
server machine, acquir e s acquire local authentication information fi-om the connection s e rv e r, 
server machine, the local authentication information associating the first authentication 
information with a predetermined authentication information and second authentication 
information with the predetermined authentication information, and stor es store the local 
authentication information; 

rec e iv e s receive second authentication information input by a user 
when the user instructs a connection request with respect to the connection s e rv e r, server 
machine, again calculat e s calculate the first authentication information unique to the client 
apparatus T- machine. auth e nticat e s authenticate the second authentication information and the 
again calculated first authentication information based on the stored local authentication 
information, and if authentication is successful, e ncrypts encrypt the second authentication 
information by a first encryption method and transmit s transmit the encrypted second 
authentication information to the authentication s e rv e r: - server machine: and 
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r e ceiv e s. - receive. independent of the connection s e rv e r, server 
machine, from the authentication seF¥er= -server machine, a conneetion server address of the 
connection s e rv e r -; server machine, tran s mits transmit to the connection server address the 
second authentication information encrypted by a second encryption method and starts start 
communication with the connection seFveF rserver machine. 

12. (Currently Amended) A connection method using a network connection 
system including a client apparatus, an authentication server, and a connection server, the 
method comprising: 

storing in the authentication server second connection authentication 
information generated by the connection server based on first connection authentication 
information; 

associating the second connection authentication information with a 
coimection server address of the connection server; 

transmittin g in a message by the elient apparatus to the authentication server a 
second connection authentication information generated by the client apparatus as user 
identification information together with a connection- r ea u e s tr request, the message not 
containing an address of the connection server; 

acquiring a client address and the user identifying information from the client 
apparatus-whe n once the authentication server receives the connection request from the client 
apparatus; 

transmitting the client address to the connection server address of the 
connection server-whe n once the user identification information is authenticated based on the 
second connection authentication information; 

transmittin g, by the authentication server, the connection server address to the 
client apparatus: apparatus, the authentication server transmitting the cormection server 
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address to the client apparatus in an authentication process before having ever received the 
connection server address from the client apparatus in the same authentication process; 

receiving by the client apparatus, independent of the connection server, the 
connection server address from the authentication server; 

transmitting by the client apparatus a first connection authentication 
information to the connection server address; 

receiving by the connection server the first connection authentication 
information from the client address; and 

performing an authentication process by using the first connection 
authentication information transmitted from the client address. 

13. (Currently Amended) A coimection method using a network connection 
system including a client apparatus, an authentication server, and a connection server, the 
method comprising: 

storing by the authentication server a user name and a password which are 
encrypted by a first encryption method; 

storing in a retention imit in the authentication server an association between 
both the encrypted user name and the encrypted password and a connection server address of 
the connection server; 

transmittin g in a message by the client apparatus to the authentication server a 
connection request and the user name and the password which are encrypted by the first 
encryption method: method, the message not containing an address of the connection server: 
receiving by the authentication server the connection request from the client 

apparatus; 
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acquiring a client address of the client apparatus and the user name and the 
password, which are encrypted by the first encryption method, as information identifying a 
user of the client apparatus; 

searching, by the authentication server, in response to receiving the 
information identifying the user of the client apparatus from the client apparatus, the retention 
unit for the information identifying the user of the client apparatus to determine the 
connection server address associated with the information identifying the user of the client 
apparatus; 

transmitting, by the the authentication server, the connection server address to 
the client apparatus in an authentication process before having ever received the connection 
server address from the client apparatus in the same authentication process; 

transmitting the client address to the connection server address; 
receiving by the connection server the client address; 
switching, by the connection server, from a state in which authentication 
information is not allowed to be received from the clien t - addr es s- ind e p e nd e nt of th e 
authen t ication s e rv e r , address to a state in which authentication information is allowed to be 
received from the client addr e ss, ind e p e nd e nt of th e auth e ntication serv e r, address, the 
switching occurring in response to the receiving of the client address; 

transmitting to the authentication server information indicating that the 
connection server has shifted to a connection wait state in which the cormection server allows 
communication from the address of the client apparatus for a predetermined period; 

encrypting using a second encryption method a user name and a password 
input by a user; 
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tran s mitting, ind e p e nd e nt of th e auth e ntication s e rv e r, transmitting to the 
connection server address the user name and the password which are encrypted by the second 
encryption method; and 

performing, by the connection server, an authentication process by using the 
user name and the password which are encrypted by the second encryption method and are 
received by the connection server from the client apparatus. 

14. (Currently Amended) The network connection system according to claim 1, 
wherein the sixth unit of the connection serve r machine allows the first connection 
authentication information to be received from the client address for a limited time period. 

15. (Currently Amended) The connection serve r machine according to claim 5, 
wherein after a limited time period has elapsed since the control unit performs the switching, 
the control unit switches back from the state in which authentication information is allowed 
to be received from the client address, ind e p e nd e nt of th e authentication s e rv e r, address to the 
state in which authentication information is not allowed to be received from the client 
addr es s. - ind e p e nd e nt of the auth e ntication s e r\^er. address. 

16. (Previously Presented) The connection method according to claim 12, further 
comprising: 

allowing the connection server to receive the first connection authentication 
information from the client address for a limited time period. 

17. (Currently Amended) The connection method according to claim 13, further 
comprising: 

after a limited time period has elapsed since the coimection server performs 
the switching, switching back from the state in which authentication information is allowed to 
be received from the client addr e ss, ind e p e nd e nt of the auth e ntication s e rv e r , address to the 
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state in which authentication information is not allowed to.be received from the client 
addr e ss, ind e p e nd e nt of th e- auth e ntication s e rv e r, address. 

18. (Currently Amended) A computer readable storage medium storing a program 
causing a computer of a client apparatus to execute an access processing to a network system 
including an authentication server and a connection server, wherein, 

the authentication server includes (i) a first unit that acquires, from the 
connection server, an address of the connection server and user identification information 
encrypted by the connection server with a first encryption method and (ii) a first retention unit 
that stores the address of the connection server and the encrypted user identification 
information which are acquired by the first unit, 

the connection server includes a second retention unit that stores unique 
information which is unique to the client apparatus and the user identification information, 

the client apparatus includes a third retention unit that stores an address of the 
authentication server, first information and second information, wherein the first information 
is generated by the connection server by encrypting predetermined information with the 
unique information as a key and the second information is generated by the connection server 
by encrypting predetermined information with the user identification information as a key, 
the access processing comprising: 

requesting a user to enter user identification information, 
receiving user identification information from the user, 
generating unique information which is unique to the client apparatus in 
response to receiving the user identification information, 

decrypting the first information stored in the third retention unit by using the 
generated unique information as a key. 
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decrypting the second information stored in the third retention unit by using 
the received user identification information as a key, 

judging whether the decrypted first and second information are correct, 
encrypting the received user identification information with the first 
encryption method-whenjf the decrypted first and second information is correct, and correct. 

transmittin g in a message, to the authentication server, an access request and 
the received used identification information encrypted with the first encryption m e thod: 
method, the message not containing the address of the connection server, and 

receiving fi~om the authentication server the address of the connection server 
before having ever transmitted the connection server address to the authentication server in 
the same access processing. 
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